Archive-Extraction — PoC Archivehttps://poc.intelseclab.com/tags/archive-extraction/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000npm `tar` Package Unicode-Normalization Race Condition / File Collision (CVE-2026-2395)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-2395-tar-race-condition/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-2395-tar-race-condition/Medium severity — misc · CVE-2026-2395. Status: PoC. Affects: tar npm package. Tags: tar, nodejs, npm, race-condition, unicode-normalization, file-collision, archive-extraction, data-corruption.miscMediumtarnodejsnpmrace-conditionunicode-normalizationfile-collisionarchive-extractiondata-corruptionNode.js `tar` Package Symlink Path Traversal — CVE-2026-29786https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-29786-node-tar-symlink-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-29786-node-tar-symlink-traversal/High severity — misc · CVE-2026-29786. Status: PoC. Affects: tar npm package (Node.js). Tags: node-tar, path-traversal, symlink, archive-extraction, arbitrary-file-write, nodejs, supply-chain.miscHighnode-tarpath-traversalsymlinkarchive-extractionarbitrary-file-writenodejssupply-chainDocker cp Copy-Out Destination Escape via Symlink Racehttps://poc.intelseclab.com/pocs/cloud/2026-07-03_docker-cp-copyout-destination-escape/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-03_docker-cp-copyout-destination-escape/Medium severity — cloud · None assigned as of 2026-07-03. Status: PoC. Affects: Docker Engine / CLI. Tags: docker, container-escape, toctou, symlink-race, docker-cp, path-traversal, archive-extraction, host-file-write.cloudMediumdockercontainer-escapetoctousymlink-racedocker-cppath-traversalarchive-extractionhost-file-write7-Zip RAR5 Mark-of-the-Web / ADS Full-Chain Bypasshttps://poc.intelseclab.com/pocs/misc/2026-07-03_7zip-rar5-motw-ads-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-03_7zip-rar5-motw-ads-bypass/High severity — misc · None assigned as of 2026-07-03. Status: PoC. Affects: 7-Zip 26.01 x64 for Windows. Tags: 7-zip, rar5, mark-of-the-web, alternate-data-streams, ntfs, motw-bypass, windows, archive-extraction.miscHigh7-ziprar5mark-of-the-webalternate-data-streamsntfsmotw-bypasswindowsarchive-extractionLiteSpeed User-End cPanel Plugin Local Privilege Escalation (CVE-2026-48172)https://poc.intelseclab.com/pocs/web/2026-05-30_litespeed-user-end-cpanel-plugin-privesc/Sat, 30 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-30_litespeed-user-end-cpanel-plugin-privesc/High severity — web · CVE-2026-48172. Status: Patched. Affects: LiteSpeed cPanel Plugin. Tags: local-privilege-escalation, cPanel, LiteSpeed, symlink, archive-extraction.webHighlocal-privilege-escalationcPanelLiteSpeedsymlinkarchive-extraction